Search: “X users”

632 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 633 Malware 565 Exploit / PoC 296 Ransomware 285 Threat actor 210 Data breach 148 Policy & legal 138 Industry 121 Phishing & fraud 103 AI safety & security 42 AI industry 37 Research 37 Advisory 23 Tools 20

SeverityAll critical 905 high 729 medium 606 low 355 info 116

Apple Updates Everything, (Mon, Sep 14th)

Apple patched a record 261 vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS 27, and other platforms, with none flagged as exploited.

Apple's annual OS update shipped iOS/iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27, and visionOS 27 plus bug-fix releases for the 26 and 15 branches, fixing a record 261 vulnerabilities. Notable issues include multiple kernel flaws allowing root privilege escalation (CVE-2026-43689, CVE-2026-43691, CVE-2026-43698, CVE-2026-43786), remote code execution in CUPS (CVE-2026-43692), kernel memory corruption via malicious NFS servers (CVE-2026-43686, CVE-2026-43687), and WebKit memory corruption from crafted web content (CVE-2026-43715). No vulnerabilities are labeled as actively exploited, and Apple does not assign per-CVE severities. Users report iOS 26.7 being downloaded when iOS 27 is intended, and tools like Little Snitch and BlockBlock need updates before upgrading to macOS 27.

SANS Internet Storm CenterSep 14, 18:33 UTC · 1d agoVulnerability CVE-2022-3437 CVE-2026-20683 CVE-2026-28899+27 CVEs

IT Threat Evolution: Q2 2011

Kaspersky SecurelistAug 11, 11:05 UTC · Aug 11, 2011Vulnerability

Elon Musk claims that a DDoS attack caused problems with the livestream interview with Donald Trump

Security AffairsAug 13, 17:22 UTC · Aug 13, 2024Vulnerability

Cyble Vision X covers the entire breach lifecycle

Help Net SecurityMay 3, 00:00 UTC · May 3, 2024Vulnerability

Android Installer Hijacking Vulnerability Could Expose Android Users to Malware

Palo Alto Unit 42Aug 17, 20:13 UTC · Aug 17, 2022Vulnerability

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

Security AffairsJul 7, 21:16 UTC · Jul 7, 2026Vulnerability in the wildCVE-2026-208961

DNSChanger and the FBI's internet blackout on 8 March

Security AffairsJan 13, 15:11 UTC · Jan 13, 2018Vulnerability

Rezilion updates its vulnerability risk determination tool MI-X

Help Net SecurityDec 9, 00:00 UTC · Dec 9, 2022Vulnerability

Vulnerability Spotlight: Multiple privilege escalation vulnerabilities in CleanMyMac X

Cisco TalosJan 2, 18:50 UTC · Jan 2, 2019Vulnerability CVE-2018-4032 CVE-2018-4033 CVE-2018-4034+8 CVEs

CVE-2026-82310: Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT access

Apache Airflow FAB provider 2.0.0-3.8.x lets deactivated users keep unexpired Core API JWTs and mint replacements indefinitely.

CVE-2026-82310 affects apache-airflow-providers-fab versions 2.0.0 before 3.9.0. Deactivating a user account does not stop tokens issued before deactivation. While password authentication correctly rejects the disabled account, the Core API continues to accept an existing unexpired token naming it and lets that token mint a replacement. Severity is rated moderate.

oss-securitySep 15, 19:56 UTC · 22h agoVulnerability CVE-2026-82310

Demystifying Kubernetes CVE-2018

Palo Alto Unit 42Jan 28, 20:53 UTC · Jan 28, 2022Vulnerability CVE-2018-1002105

CVE-2026-75015: Apache Syncope: Nested secrets leak cleartext into audit records readable

Apache Syncope leaks nested secrets in cleartext into audit records readable by unauthorized users; affects 3.0.x, 4.0.x, and 4.1.x versions.

CVE-2026-75015 is an insufficiently protected credentials vulnerability in Apache Syncope where audit events expose nested secrets in cleartext to users able to read those records. Affected component is syncope-core-provisioning-java 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. Apache rates the issue moderate severity, and users should upgrade to fixed releases.

oss-securitySep 14, 15:36 UTC · 2d agoVulnerability CVE-2026-75015

Magento and the Log4j vulnerability

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability

ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories

The Hacker NewsJun 12, 05:36 UTC · Jun 12, 2026Vulnerability1

Microsoft: China Using AI

Infosecurity MagazineApr 5, 11:03 UTC · Apr 5, 2024Vulnerability CVE-2023-42793

New Privilege Escalation Flaw Affects Most Linux Distributions

The Hacker NewsOct 26, 13:59 UTC · Oct 26, 2018Vulnerability CVE-2018-14665

Vulnerability Spotlight: Apple OS X Graphics Kernel Driver Local Privilege Escalation Vulnerability

Cisco TalosMar 22, 21:57 UTC · Mar 22, 2016Vulnerability CVE-2016-1743

Ivanti Rushes Patches for 4 New Flaws in Connect Secure and Policy Secure

The Hacker NewsApr 4, 06:30 UTC · Apr 4, 2024Vulnerability CVE-2024-21894 CVE-2024-22052 CVE-2024-22053+3 CVEs

Vulnerability Spotlight: Privilege escalation bug in CleanMyMac X's helper service

Cisco TalosMar 12, 14:24 UTC · Mar 12, 2019Vulnerability in the wildCVE-2019-5011

CVE-2026-57866: Apache Impala: Secrets Exfiltration via SSRF

Apache Impala CVE-2026-57866 lets authenticated users abuse ai_generate_text() to exfiltrate secrets from configured Hadoop credential providers via SSRF.

A server-side request forgery affects Apache Impala versions 4.4.0 through 4.5.1. Authenticated users with permission to execute the ai_generate_text() function can exfiltrate secrets provided by credential providers configured via hadoop.security.credential.provider.path in core-site.xml. The attacker must know the secret's key name, and Apache rates the issue 'important'.

oss-securitySep 8, 21:39 UTC · 7d agoVulnerability 3 sources CVE-2026-57866